Categories: Malware

What is “Mal/Generic-R + Mal/Cerber-I”?

The Mal/Generic-R + Mal/Cerber-I is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Mal/Generic-R + Mal/Cerber-I virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Reads data out of its own binary image
Creates an excessive number of UDP connection attempts to external IP addresses
Uses Windows utilities for basic functionality
Attempts to delete volume shadow copies
Attempts to repeatedly call a single API many times in order to delay analysis time
Exhibits behavior characteristic of Cerber ransomware
Anomalous binary characteristics

How to determine Mal/Generic-R + Mal/Cerber-I?


File Info:
crc32: A918943Emd5: 0ae23ecfd27baafff6d5dafe3900ccf7name: 0AE23ECFD27BAAFFF6D5DAFE3900CCF7.mlwsha1: 4ece038419178b9452dd7d05a73bb96d01ebb18csha256: e06f97352fced423e3af3f0022a0b16fac1a93516400ef5903b55455d01c627asha512: 0a7df2c0c624b9dd7e1714a404c2394e366c40631bc5ab45b653735ba80a9dfd5e30b387588c3a522bb8dcb798aa4a7f489e98b1e1c5d3c5b69f9eae3207ecf7ssdeep: 6144:yW+7+eMgtg5XVdzxlu+KB+84UWD9VWQOJl8nssDmbjArj3MKC:yR/tgNVPQBM1DbyGoArjcKCtype: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Version Info:
0: [No Data]

Mal/Generic-R + Mal/Cerber-I also known as:

Bkav	W32.AIDetect.malware2
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
CAT-QuickHeal	Ransom.Locky.A
ALYac	Gen:Variant.Nemesis.66
CrowdStrike	win/malicious_confidence_100% (W)
Cybereason	malicious.fd27ba
Symantec	Packed.NSISPacker!g1
ESET-NOD32	Win32/Filecoder.Cerber.B
APEX	Malicious
Avast	Win32:Dropper-gen [Drp]
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Nemesis.66
NANO-Antivirus	Trojan.Dos.Code.egouyv
SUPERAntiSpyware	Ransom.Locky/Variant
MicroWorld-eScan	Gen:Variant.Nemesis.66
Sophos	Mal/Generic-R + Mal/Cerber-I
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	Ransom_CERBERENC.SMNS4
McAfee-GW-Edition	BehavesLike.Win32.ObfusRansom.cc
FireEye	Generic.mg.0ae23ecfd27baaff
Emsisoft	Gen:Variant.Nemesis.66 (B)
SentinelOne	Static AI – Malicious PE
Avira	TR/Dropper.Gen
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Nemesis.66
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Nemesis.66
TACHYON	Ransom/W32.Cerber.204741
AhnLab-V3	Trojan/Win32.Cerber.C1579875
McAfee	Artemis!0AE23ECFD27B
MAX	malware (ai score=81)
Panda	Trj/CI.A
TrendMicro-HouseCall	Ransom_CERBERENC.SMNS4
Fortinet	W32/Cerber.4C18!tr.ransom
AVG	Win32:Dropper-gen [Drp]